Mark备查。。。Win8 RP的ntdll新增函数列表

Win7 SP1对比Win8 RP

[C:\Users\Windows\Desktop\ntdll.dll] compare [C:\Windows\system32\ntdll.dll],file1 not:

NtGetPlugPlayEvent
RtlEnlargedUnsignedDivide
TpDbgGetFreeInfo
TpPoolFreeUnusedNodes
ZwGetPlugPlayEvent
[C:\Users\Windows\Desktop\ntdll.dll] compare [C:\Windows\system32\ntdll.dll],file2 not:

ApiSetQueryApiSetPresence
EtwEventSetInformation
LdrAddDllDirectory
LdrAppxHandleIntegrityFailure
LdrGetDllDirectory
LdrGetDllFullName
LdrGetDllPath
LdrGetProcedureAddressForCaller
LdrProcessRelocationBlockEx
LdrQueryOptionalDelayLoadedAPI
LdrRemoveDllDirectory
LdrResolveDelayLoadedAPI
LdrResolveDelayLoadsFromDll
LdrSetDefaultDllDirectories
LdrSetDllDirectory
LdrStandardizeSystemPath
LdrSystemDllInitBlock
NtAddAtomEx
NtAdjustTokenClaimsAndDeviceGroups
NtAlertThreadByThreadId
NtAlpcConnectPortEx
NtAssociateWaitCompletionPacket
NtCancelWaitCompletionPacket
NtCreateDirectoryObjectEx
NtCreateIRTimer
NtCreateLowBoxToken
NtCreateTokenEx
NtCreateWaitCompletionPacket
NtCreateWnfStateName
NtDeleteWnfStateData
NtDeleteWnfStateName
NtFilterBootOption
NtFilterTokenEx
NtFlushBuffersFileEx
NtGetCachedSigningLevel
NtQueryWnfStateData
NtQueryWnfStateNameInformation
NtSetCachedSigningLevel
NtSetIRTimer
NtSetInformationVirtualMemory
NtSetSystemCodeIntegrityRoots
NtSubscribeWnfStateChange
NtUnmapViewOfSectionEx
NtUnsubscribeWnfStateChange
NtUpdateWnfStateData
NtWaitForAlertByThreadId
NtWaitForWnfNotifications
RtlAddResourceAttributeAce
RtlAddScopedPolicyIDAce
RtlAllocateWnfSerializationGroup
RtlAvlInsertNodeEx
RtlAvlRemoveNode
RtlCanonicalizeDomainName
RtlCheckPortableOperatingSystem
RtlCheckTokenCapability
RtlCheckTokenMembership
RtlCheckTokenMembershipEx
RtlClearBit
RtlCopyBitMap
RtlCopyContext
RtlCrc32
RtlCrc64
RtlDecompressBufferEx
RtlDeleteElementGenericTableAvlEx
RtlEqualWnfChangeStamps
RtlExtractBitMap
RtlFlushHeaps
RtlGetAppContainerNamedObjectPath
RtlGetExePath
RtlGetSearchPath
RtlGetSystemTimePrecise
RtlInterlockedPushListSListEx
RtlIsCapabilitySid
RtlIsPackageSid
RtlIsUntrustedObject
RtlLengthSidAsUnicodeString
RtlNumberOfClearBitsInRange
RtlNumberOfSetBitsInRange
RtlPublishWnfStateData
RtlQueryPackageIdentity
RtlQueryRegistryValuesEx
RtlQueryUnbiasedInterruptTime
RtlQueryValidationRunlevel
RtlQueryWnfMetaNotification
RtlQueryWnfStateData
RtlQueryWnfStateDataWithExplicitScope
RtlRbInsertNodeEx
RtlRbRemoveNode
RtlRegisterForWnfMetaNotification
RtlReleasePath
RtlResetNtUserPfn
RtlSetBit
RtlSetPortableOperatingSystem
RtlSetSearchPathMode
RtlSubscribeWnfStateChangeNotification
RtlTestAndPublishWnfStateData
RtlTryConvertSRWLockSharedToExclusiveOrRelease
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlUnsubscribeWnfNotificationWithCompletionCallback
RtlUnsubscribeWnfStateChangeNotification
RtlWaitForWnfMetaNotification
RtlWaitOnAddress
RtlWakeAddressAll
RtlWakeAddressAllNoFence
RtlWakeAddressSingle
RtlWakeAddressSingleNoFence
RtlWnfCompareChangeStamp
RtlWnfDllUnloadCallback
RtlpConvertAbsoluteToRelativeSecurityAttribute
RtlpConvertRelativeToAbsoluteSecurityAttribute
RtlpFreezeTimeBias
RtlpMergeSecurityAttributeInformation
RtlpWnfNotificationThread
TpAllocJobNotification
TpCallbackDetectedUnrecoverableError
TpReleaseJobNotification
TpSetPoolThreadBasePriority
TpSetTimerEx
TpSetWaitEx
TpTimerOutstandingCallbackCount
TpWaitForJobNotification
WinSqmIsSessionDisabled
ZwAddAtomEx
ZwAdjustTokenClaimsAndDeviceGroups
ZwAlertThreadByThreadId
ZwAlpcConnectPortEx
ZwAssociateWaitCompletionPacket
ZwCancelWaitCompletionPacket
ZwCreateDirectoryObjectEx
ZwCreateIRTimer
ZwCreateLowBoxToken
ZwCreateTokenEx
ZwCreateWaitCompletionPacket
ZwCreateWnfStateName
ZwDeleteWnfStateData
ZwDeleteWnfStateName
ZwFilterBootOption
ZwFilterTokenEx
ZwFlushBuffersFileEx
ZwGetCachedSigningLevel
ZwQueryWnfStateData
ZwQueryWnfStateNameInformation
ZwSetCachedSigningLevel
ZwSetIRTimer
ZwSetInformationVirtualMemory
ZwSetSystemCodeIntegrityRoots
ZwSubscribeWnfStateChange
ZwUnmapViewOfSectionEx
ZwUnsubscribeWnfStateChange
ZwUpdateWnfStateData
ZwWaitForAlertByThreadId
ZwWaitForWnfNotifications
_errno
_except_handler4_common
_ftol2
_ftol2_sse
_local_unwind4
_strlwr_s
_strupr_s
_wcslwr_s
_wcstoi64
_wcsupr_s
iswalnum
iswascii
iswgraph
iswprint
qsort_s
wcstok_s